Lucene search
MitreCVELIST:CVE-2021-40884HistoryOct 11, 2021 - 10:46 a.m.
CVE-2021-40884
2021-10-1110:46:59
mitre
www.cve.org
2
projectsend version r1295 sensitive information disclosure. authorization check. files-edit.php process.php. uploader role. application security. vulnerability.
Projectsend version r1295 is affected by sensitive information disclosure. Because of not checking authorization in ids parameter in files-edit.php and id parameter in process.php function, a user with uploader role can download and edit all files of users in application.
Related
prion
prion
Information disclosure
2021-10-11 11:15:00
osv
osv
CVE-2021-40884
2021-10-11 11:15:09
cnvd
cnvd
Projectsend Information Disclosure Vulnerability
2021-10-12 00:00:00
nvd
nvd
CVE-2021-40884
2021-10-11 11:15:09
cve
cve
CVE-2021-40884
2021-10-11 11:15:09